background image

Appendix A.

Sample RHN Satellite Server Configuration File

The

/etc/rhn/rhn.conf

configuration file for the RHN Satellite Server provides a means for you

to establish key settings. Be warned, however, that errors inserted into this file may cause Satellite

failures. So make configuration changes with caution.
You should be particularly concerned with the following parameters: traceback_mail, default_db, and

server.satellite.http_proxy. Review the sample and its comments, beginning with a hash mark (#), for

additional details.

#/etc/rhn/rhn.conf example for an RHN Satellite
#----------------------------------------------

# Destination of all tracebacks, such as crash information, etc.
traceback_mail = [email protected][email protected]

# Location of RPMs (Red Hat and custom) served by the RHN Satellite
mount_point = /var/satellite

# Corporate gateway (hostname:PORT):
server.satellite.http_proxy = corporate_gateway.example.com:8080
server.satellite.http_proxy_username =
server.satellite.http_proxy_password =

# Database connection information username/password@SID
default_db = test01/test01@test01

### DON’T TOUCH ANY OF THE FOLLOWING ###
web.satellite = 1

web.session_swap_secret_1 = ea6c79f71cfcf307d567fed583c393b9
web.session_swap_secret_2 = 01dee83a7b7f27157f5335744eb02327
web.session_swap_secret_3 = 4e89e7697ce663149ca9e498cbc08b4f
web.session_swap_secret_4 = a0fed2d77a950fc9a800b450a45e89d2

web.session_secret_1 = 24bc562e04c9b93f5be94f793738e104
web.session_secret_2 = 7667a7c2db311b1ea04271ecc1b82314
web.session_secret_3 = 442e7dc4f06f63eba9a0408d499c6a8d
web.session_secret_4 = 587a0db47856f685d989095629a9bd6f

encrypted_passwords = 1

web.param_cleansers = RHN::Cleansers->cleanse
web.base_acls = RHN::Access

web.default_taskmaster_tasks = RHN::Task::SessionCleanup,

RHN::Task::ErrataQueue, RHN::Task::ErrataEngine,
RHN::Task::DailySummary, RHN::Task::SummaryPopulation,
RHN::Task::RHNProc, RHN::Task::PackageCleanup

web.rhn_gpg_backend_module = RHN::GPG::OpenPGP

web.restrict_mail_domains =

Summary of Contents for NETWORK SATELLITE SERVER 3.7

Page 1: ...RHN Satellite Server 3 7 Installation Guide...

Page 2: ...ilable at http www opencontent org openpub Distribution of substantively modified versions of this document is prohibited without the explicit permission of the copyright holder Distribution of the wo...

Page 3: ...4 3 Sendmail Configuration 28 4 4 MySQL Installation 29 5 Entitlements 31 5 1 Receiving the Certificate 31 5 2 Uploading the RHN Entitlement Certificate 32 5 3 Managing the RHN Certificate with RHN S...

Page 4: ...ng the Backup 52 8 4 4 Restoring the Database 52 8 5 Cloning the Satellite with Embedded DB 52 8 6 Establishing Redundant Satellites with Stand Alone DB 53 8 7 Conducting Satellite Specific Tasks 54 8...

Page 5: ...ems with Red Hat Network When a client system requests package updates only the applicable packages for the client are returned based upon the software profile stored on the RHN Servers Advantages of...

Page 6: ...nels and child channels A base channel consists of a list of packages based on a specific architecture and Red Hat release A child channel is a channel associated with a base channel but contains extr...

Page 7: ...ts connected to RHN Satellite Server be running the latest update of Red Hat Enterprise Linux to ensure proper connectivity When a client requests updates the organization s internal RHN Satellite Ser...

Page 8: ...on seeks to provide a definitive list of all required and recommended steps from evaluation through custom package deployment They should take place in roughly this order 1 After an evaluation you con...

Page 9: ...The rhn org trusted ssl cert noarch rpm will already be there 12 You download and install from the Satellite the configuration files and rhn org trusted ssl cert noarch rpm on the remaining client sy...

Page 10: ...6 Chapter 1 Introduction...

Page 11: ...nstall your RHN Satellite Server on Red Hat Enterprise Linux AS 3 Update 3 or Red Hat Enterprise Linux AS 4 These are the only supported base operating systems for Satellites serving Monitoring entitl...

Page 12: ...yXML 2 1 2 Red Hat Enterprise Linux AS 3 Update 3 Packages To install RHN Satellite Server on Red Hat Enterprise Linux AS 3 Update 3 first obtain the required packages in one of the following ways Whe...

Page 13: ...Enterprise Linux AS 4 you do not have to run up2date to install additional packages When kickstarting Red Hat Enterprise Linux AS 2 1 Update 5 specify the following package groups Advanced Server Base...

Page 14: ...our hours or 240 minutes as set in the etc sysconfig rhn rhnsd configuration file of the client systems you will increase the load on those components significantly Additional hardware requirements in...

Page 15: ...stem typical 500 Although you should be generous in your database sizing estimates you need to consider that size does affect the time to conduct backups and adds load to other system resources If the...

Page 16: ...ing the services provided by Red Hat through RHN Satellite Server This certificate will be required during the installation process A Red Hat Network Account Customers who will be connecting to the ce...

Page 17: ...Finally you should have the following technical documents in hand for use in roughly this order 1 The RHN Satellite Server Installation Guide This guide which you are now reading provides the essenti...

Page 18: ...14 Chapter 2 Requirements...

Page 19: ...cribes possible configurations and explains their benefits 3 1 Single Satellite Topology The simplest configuration is to use a single RHN Satellite Server to serve your entire network This configurat...

Page 20: ...Proxies act as clients of the Satelllite This vertically tiered configuration requires that channels and RPMs be created only on the RHN Satellite Server In this manner the Proxies inherit and then se...

Page 21: ...you plan to obtain Monitoring level service you must install your RHN Satellite Server on Red Hat Enterprise Linux AS 3 Update 3 or Red Hat Enterprise Linux AS 4 These are the only supported base ope...

Page 22: ...that the RHN Satellite Server Installation Program updates the kernel as well as all required packages 6 Launch the RHN Satellite Server Installation Program as root with the command mnt cdrom instal...

Page 23: ...s address will receive all mail generated by the Satellite including sometimes large quantities of error related tracebacks To stem this flow consider establishing mail filters that capture messages w...

Page 24: ...administrator for the appropriate values Then click Test DB Connection The Database Schema page appears Figure 4 4 Database Schema 10 No input is required on the Database Schema page other than your...

Page 25: ...ms with this Satellite select both the Enable monitoring backend and Enable monitoring scout check boxes In addition this page allows you to configure the Satellite to use an HTTP proxy server To do t...

Page 26: ...n 4 3 Sendmail Configuration for instruc tions When finished click Continue The RHN Registration page appears Figure 4 8 RHN Registration 14 The RHN Registration page enables you to register the Satel...

Page 27: ...cate 15 The RHN Satellite Entitlement Certificate page gathers your RHN Entitlement Certificate either by obtaining its location or collecting its contents To identify the certificate s path click Bro...

Page 28: ...nnel metadata This is possible during installation only if you chose to register your Satellite with RHN To synchronize select the Perform Satellite Sync checkbox and click Continue After the installa...

Page 29: ...s with your and your organization s information As always ensure this information exists on the backups of login information described in Chapter 2 Requirements The CA Cert Common Name field may alrea...

Page 30: ...ervers The required fields are prepopulated with values derived from previous installation steps Ensure this information is accurate Checkboxes offer options for including built in security SSL and GN...

Page 31: ...u ration Click Complete to reboot the system and create the Satellite Administrator account The Satellite Restart page appears Figure 4 14 Satellite Restart 20 The Satellite Restart page requires no u...

Page 32: ...information exists on the backups of login information described in Chapter 2 Requirements When finished click Create Login The Account Created page appears Figure 4 16 Account Created 22 The Account...

Page 33: ...ification enqueuer with the following command ln s opt notification scripts ack_enqueuer pl etc smrsh Next edit the etc aliases file on the mail server and add the following line rogerthat01 etc smrsh...

Page 34: ...lation Two extra packages will also get downloaded in the transaction These are needed for the mysql server package to be installed and run successfully Once finished your Satellite may be used to sch...

Page 35: ...g an increase in the number of entitlements 5 1 Receiving the Certificate The RHN Entitlement Certificate is an XML document that looks something like this xml version 1 0 encoding UTF 8 rhn cert vers...

Page 36: ...Deactivation You will receive a message describing the deactivation at the top of the page 5 You may then browse to the location of your new RHN Entitlement Certificate or paste its contents into the...

Page 37: ...local database 3 Activate the Satellite remotely by inserting the RHN Entitlement Certificate into the central RHN remote database This is typically accomplished during local activation but may requi...

Page 38: ...34 Chapter 5 Entitlements...

Page 39: ...tail in a moment 6 1 1 Import Sync Steps The RHN Satellite Synchronization Tool works incrementally or in steps For it to obtain Errata information it must first know the packages contained For the pa...

Page 40: ...ackage data no errata Do not process Errata information no kickstarts Do not process kickstart data provisioning only force all packages Forcibly process all package data without conducting a diff cac...

Page 41: ...ocess This cache which exists by default in var cache rhn can be completely refreshed every time the process is run be partially refreshed or be left in place entirely The closer to a full refresh the...

Page 42: ...the channel for your version of RHN Satellite Server Click the Downloads tab and use the instructions on the page to obtain the Channel Content ISOs available by version of Red Hat Enterprise Linux If...

Page 43: ...tems to channels as soon as they appear in the RHN Satellite Server s website No packages are necessary for registration although updates cannot be retrieved from the Satellite until the channel is co...

Page 44: ...or an explanation 2 Examines the export and identifies differences between the RHN Satellite Server data set and the exported RHN data set For a particular channel the following information is analyze...

Page 45: ...ng for Import for instructions on downloading the ISOs For ease of import we recommend that the data be copied from media directly into a common repository through a command such as the following cp r...

Page 46: ...42 Chapter 6 Importing and Synchronizing...

Page 47: ...te Server var log rhn directory RHN Satellite Server Installation Program var log rhn_satellite_install log Database installation Embedded Database var log rhn rhn database installation log Database p...

Page 48: ...n schema version To derive the character set types of your Satellite s database run the command rhn charsets If the administrator isn t getting email from the RHN Satellite Server confirm the correct...

Page 49: ...to be updated when the machine obtains a new address 7 4 Connection Errors A common connection problem indicated by SSL_CONNECT errors is the result of a Satellite being installed on a machine whose...

Page 50: ...set the cache refresh level for all importing and synchronizing using the cache refresh level option of satellite sync Setting this to its highest level removes the cache entirely upon initialization...

Page 51: ...Chapter 7 Troubleshooting 47 Once finished email the new file from the tmp directory to your Red Hat representative for imme diate diagnosis...

Page 52: ...48 Chapter 7 Troubleshooting...

Page 53: ...ata for the RHN Satellite Server For RHN Satellite Server systems that may be connected to the Internet the best method for applying these Errata Updates is using the Red Hat Update Agent via Red Hat...

Page 54: ...ository it can be regenerated with satellite sync Red Hat recommends the entire var satellite tree be backed up In the case of disconnected satellites var satellite must be backed up Backing up only t...

Page 55: ...e database instance This can also be accomplished by issuing the service rhn database stop command as root verify DIRNAME Verifies the contents of the backup kept in DIRNAME This command checks the md...

Page 56: ...ssing files issue this command as oracle db control examine DIRNAME To conduct a more thorough review including checking the md5sum of each of the files in the backup issue this command as oracle db c...

Page 57: ...s with Stand Alone Database may be run as active as well as standby This is entirely up to your network topology and is independent of the steps listed here To establish this redundancy first install...

Page 58: ...by default located in var satellite between the Satellites over some type of networked storage device This eliminates data replication and ensures a consistent store of data for each Satellite 8 Make...

Page 59: ...rrata mailings etc that must be performed in the background The page displays the execution times for various activities carried out by the daemon Administrators should ensure the RHN Task Engine stay...

Page 60: ...User List click the name of the user to be removed This takes you to the User Details page Click the delete user link at the top right corner of the page Figure 8 2 User Deletion A confirmation page w...

Page 61: ...6 1 2 Im port Sync Options for the full list of options Once you exit from the editor the modified crontab is installed immediately 8 9 Implementing PAM Authentication As security measures become incr...

Page 62: ...s as described in Section 2 4 Additional Requirements Then you must install the osa dispatcher package which can be found in the RHN Satellite Server software channel for the Satellite within the cen...

Page 63: ...teway example com 8080 server satellite http_proxy_username server satellite http_proxy_password Database connection information username password SID default_db test01 test01 test01 DON T TOUCH ANY O...

Page 64: ...60 Appendix A Sample RHN Satellite Server Configuration File...

Page 65: ...prerequisites 38 running the import 39 installation base 17 MySQL 29 of RHN Satellite Server 17 sendmail 29 installation task list 4 L log files 43 M maintenance 49 R Red Hat Network introduction 1 r...

Page 66: ...he refresh 37 options 35 steps 35 summary of steps 4 synchronizing keeping channel data is sync 40 T terms to understand 2 tool use 54 topologies 15 multiple satellites horizontally tiered 15 satellit...

Reviews: